airfleet/airfleet-security-plugin

Project releases

airfleet-security-plugin

Release 4.0.0

PHP version requirement increased to 8.2 and Airfleet Framework plugin added as a dependency.

GitHub
View full changelog

Changed

  • Breaking: Increased PHP version requirement to >=8.2
  • Breaking: Added new dependency - Airfleet Framework plugin - and removed scoped framework composer package
  • Added plugin dependencies in main plugin file (Requires Plugins metadata field)
  • Internal: Increased Node.js version requirement to >=24
  • Internal: Bump npm dependency @airfleet/wordpress-dev to ^4.0.0
  • Internal: Bump composer dependency airfleet/wordpress-dev to ^4.0.0
  • Internal: Switched package manager to Bun
  • Internal: Updated linters and development tools
  • Internal: Updated configuration for development tools
  • Internal: Moved configuration sections from package.json to dedicated config files
  • Internal: Updated browserslist configuration
  • Internal: Updated package.json scripts to use Airfleet CLI
  • Internal: Updated README.md to remove Getting Started and Documentation sections
  • Internal: Updated Plugin URI metadata field in main plugin file
  • Internal: Updated GitHub workflows
  • Internal: Added .airfleet-license and .airfleet-visible
airfleet-security-plugin

Release 3.4.1

Exclude save post REST API from nonce in CSP.

GitHub
View full changelog

Fixed

  • CSP: exclude save post REST API from nonce.
airfleet-security-plugin

Release 3.4.0

Added event tracking for CSP enable/disable and reports export.

GitHub
View full changelog

Changed

  • Added event tracking for CSP enable/disable and reports export.
airfleet-security-plugin

Release 3.3.0

Added option to remove old reports from the database.

GitHub
View full changelog

Changed

  • Added option to remove old reports from DB.
airfleet-security-plugin

Release 3.2.4

CSP now uses a nonce only on non-admin pages.

GitHub
View full changelog

Fixed

  • CSP: nonce only for non-admin pages
airfleet-security-plugin

Release 3.2.3

Fixed a PHP warning related to DOCUMENT_URI in CSP.

GitHub
View full changelog

Fixed

  • CSP: fixed $_SERVER['DOCUMENT_URI'] PHP Warning message
airfleet-security-plugin

Release 3.2.2

Fixed issues with reporting in the security plugin, including a missing table and incorrect header for Chrome.

GitHub
View full changelog

Fixed

  • CSP: fixed reporting table not created on plugin activation
  • CSP: fixed reporting header for Chrome
airfleet-security-plugin

Release 3.2.1

Set composer vendor-scoped autoloader suffix based on plugin name

GitHub
View full changelog

Changed

  • Set composer vendor-scoped autoloader-suffix based on plugin name
airfleet-security-plugin

Release 3.2.0

Menu location changed to under Settings

GitHub
View full changelog

Changed

  • Changed menu location to appear under Settings
airfleet-security-plugin

Release 3.1.0

Updated CSP directive values to replace newlines with spaces

GitHub
View full changelog

Changed

  • Updated list of available directives according to latest list from MDN Web Docs

Fixed

  • Automatically replaces newlines with a single space in CSP directive values
airfleet-security-plugin

Release 3.0.4

No longer auto-adds apostrophes to directive values

GitHub
View full changelog

Fixed

  • No longer auto-adds apostrophes (') at the start and end of directive values
airfleet-security-plugin

Release 3.0.3

Fixed a fatal error due to an incorrect namespace

GitHub
View full changelog

Fixed

  • Fixed wrong namespace that caused fatal error
airfleet-security-plugin

Release 3.0.1

Scripts are no longer modified when the general CSP option is disabled.

GitHub
View full changelog

Fixed

  • Fixed scripts being modified even when general CSP option is disabled
airfleet-security-plugin

Release 3.0.0

Removed dependency on Airfleet Framework plugin

GitHub
View full changelog

Changed

  • Removed dependency on Airfleet Framework plugin
  • Internal: refactored all the tooling and code to match latest plugin conventions
airfleet-security-plugin

Release 2.4.7

Updated dependencies and fixed security issues

GitHub
View full changelog

Changed

  • Updated references from GitLab to GitHub
  • Updated npm dependencies with security fixes
  • Updated airfleet dependencies to latest